Yealink SIP-T48G — настройка аутентификации 802.1X для IP-телефонов [194/465]

Administrator’s Guide for SIP-T4X IP Phones

180

5. Click Confirm to accept the change.

IEEE 802.1X authentication is an IEEE standard for Port-based Network Access Control

(PNAC), part of the IEEE 802.1 group of networking protocols. It offers an authentication

mechanism for devices to connect to a LAN or WLAN. The 802.1X authentication involves

three parties: a supplicant, an authenticator and an authentication server. The

supplicant is the IP phone that wishes to attach to the LAN or WLAN. With 802.1X

port-based authentication, the IP phone provides credentials, such as user name and

password, for the authenticator, and then the authenticator forwards the credentials to

the authentication server for verification. If the authentication server determines the

credentials are valid, the IP phone is allowed to access resources located on the

protected side of the network.

IP phones support protocols EAP-MD5, EAP-TLS, PEAP-MSCHAPv2 and

EAP-TTLS/EAP-MSCHAPv2 for 802.1X authentication.

Procedure

802.1X authentication can be configured using the configuration files or locally.

Configuration File

<y0000000000xx>.cfg

Configure the 802.1X

authentication on the IP phone.

For more information, refer to

802.1X on page 350.

Local

Web User Interface

Configure the 802.1X

authentication on the IP phone.

Navigate to:

http://<phoneIPAddress>/servl

et?p=network-adv&q=load

Phone User Interface

Configure the 802.1X

authentication on the IP phone.

To configure the 802.1X via web user interface:

1. Click on Network->Advanced.

2. In the 802.1x block, select the desired protocol from the pull-down list of Mode

802.1x.

a) If you select EAP-MD5:

1) Enter the user name for authentication in the Identity field.